Microsoft Azure Active Site Recovery vulnerabilities

1 known vulnerability affecting microsoft/azure_active_site_recovery.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2021-42306MEDIUMCVSS 6.5fixed in 2021-11-012021-11-24

CVE-2021-42306 [MEDIUM] CWE-522 CVE-2021-42306: An information disclosure vulnerability manifests when a user or an application uploads unprotected An information disclosure vulnerability manifests when a user or an application uploads unprotected private key data as part of an authentication certificate keyCredential on an Azure AD Application or Service Principal (which is not recommended). This vulnerability allows a user or service in the tenant with application read access to read the priva